Privacy Policy
Short version: Ordo keeps your dumps on your own device. To sort a dump, its text is sent to our sorting service and to Anthropic, our AI partner; we don't store it. We have no accounts, no ads in the app and no tracking across other apps. To learn whether Ordo is working for people, we count anonymously up to one app open per install per day (and, yes or no, whether any reminder is set and whether Ordo may send notifications) and each sorted dump — the day, typed or voice, and how many cards — never what it said, and whether Ordo was installed from one of our App Store ads. We delete those records in a daily cleanup once they are older than 90 days. If the app crashes, an anonymous technical report helps us fix it. Our website uses cookie-less, aggregate-only visitor counts. You can delete everything anytime.
1. Who we are
Ordo (the "App") is published by Samuel Laredo ("we", "us", "our"). You can reach us at heyordo.app@gmail.com.
2. What we collect
We collect the minimum needed to make Ordo work:
- Launch-list email. If you joined the waitlist on heyordo.app before Ordo became available, your email was collected and stored by Tally, our form provider, so we could send the Ordo launch notice you requested. Tally processes form data on our behalf under its privacy notice. We do not sell your email or use it for unrelated advertising.
- The text you capture. When you save a dump while online, its text is sent through our Cloudflare service to Anthropic to be sorted and refined (see Section 3). We do not store dump text in a database on any server we control. Your saved items live on your device.
- An anonymous app ID. The first time you open Ordo, it makes a random ID for itself. It isn't your name, email, phone number or Apple ID, and it isn't the advertising identifier. It's sent with each dump and in app-open pings so we can stop anyone overloading the sorting service and count return visits without knowing who anyone is. An app-open ping may be sent again if a reminder is set later that day; this does not create another daily open record. Delete the app and a new ID is made next time.
- Anonymous usage counts. We record at most one app open per install per day: the date (no time of day), the app version, whether you have at least one reminder set (yes or no: never what a reminder says, when it is, or how many), whether Ordo is allowed to send you notifications (yes or no: the iPhone setting only, never what any notification says) and a scrambled form of the app ID (a keyed hash, so it can't be turned back into the ID). If you set a reminder or allow notifications later that day, Ordo updates that day's record with the yes; it's still one record per day. Each time a dump is sorted, we record the same date, version and scrambled ID, plus whether it was typed or spoken and how many cards it became. Never the words of your dump, your cards, what your reminders say or when they're set, your IP address or your location. We use these counts only to see whether people come back. Each record is deleted in a daily cleanup once it is older than 90 days. Because the counts can't tell us whose they are, we can't pick out one person's records; they simply expire.
- Where Ordo was installed from. Ordo asks Apple whether the install came from an Apple Search Ads ad and may retry until Apple provides an answer. Apple's response may contain other details, but Ordo keeps only the yes/no result, once per install. We store that result with the scrambled app ID; it is deleted in a daily cleanup once it is older than 90 days. This uses no advertising identifier, needs no tracking permission, and nothing follows you across other apps or websites. It tells us whether our App Store ads bring people who find Ordo useful.
- App preferences. Things like dark/light mode, your reminders, and whether you've completed the intro. Stored locally on your device only.
- Crash reports. If the app crashes or hits an error, a technical report may be sent to Sentry (Functional Software, Inc.), our crash-reporting service. Reports may include information such as device type, operating-system version, and error context. Sentry is configured not to send default personally identifiable information, and we do not intentionally attach the text of your dumps. Apple may additionally share its own crash reports with us if you have opted in on your device.
- Dictation. When you tap the mic, your speech is turned into text by Apple's speech recognition (Apple's privacy terms apply). Ordo receives only the text, which is then treated like any typed dump. Ordo never receives or stores audio.
- Website visits (heyordo.app only, not the App). Our website uses Cloudflare Web Analytics to count visits and measure page performance without cookies or cross-site tracking. Cloudflare processes this website data; anonymous App usage counts are described above.
We do not collect:
- Your name, phone number, or an in-app account. Email was collected only from people who voluntarily joined the former website waitlist.
- Your location.
- Your contacts, photos, or other device data.
- Advertising identifiers or device fingerprints.
- Tracking of what you do in other companies' apps or websites.
- The words of your dumps, cards or reminders in any usage count.
3. AI processing — how the sorting works
When you save a dump while online, Ordo sends its text through a stateless service hosted on Cloudflare to Anthropic, PBC ("Anthropic"), the maker of the Claude AI model. Anthropic processes the text and returns a sorted version, which Ordo then displays and stores on your device.
What this means in practice:
- The text leaves your device to provide the AI-sorting feature.
- Our Cloudflare service passes the text to Anthropic and does not store it in a content database.
- Anthropic states that standard API inputs and outputs are deleted from its backend within 30 days, except where a different agreement applies or longer retention is required for usage-policy enforcement or by law. See Anthropic's retention information.
- Anthropic states that commercial API inputs and outputs are not used to train its models by default unless the customer explicitly opts in or submits feedback. See Anthropic's training information.
- We do not sell your dumps or use them for advertising.
4. Where your data lives
Everything you create in Ordo — your dumps, reminders, completed items, settings — is stored on your device using iOS's local storage. Nothing syncs to any cloud we control. If you delete the app, that data is gone from your device.
Waitlist emails are stored with Tally until we no longer need them for Ordo launch communications or you ask us to delete yours.
You can export a full backup of your data anytime from Settings → Back up → Export a backup. Restore brings it back.
5. Your rights and choices
- Remove your launch-list email. Email heyordo.app@gmail.com and ask us to delete your former waitlist submission.
- Delete your data. Swipe a card to delete it, empty Settings → Recently deleted, or delete the app from your device. Anonymous usage records are deleted in a daily cleanup once they are older than 90 days.
- Export your data. Settings → Back up → Export a backup saves everything as a file you control. Restore brings it back.
- AI sorting. Sorting needs a connection. If you're offline, Ordo keeps your dump on the phone and sorts it when you're back online, so turning off internet delays sorting rather than opting out of it. If you don't want a thought processed by AI, don't dump it.
- Reach us. Email heyordo.app@gmail.com with any questions about your data or this policy.
Depending on where you live, you may have additional rights concerning personal data, including rights to access, correct, or delete information. To make a request about information we control, including your former waitlist email, contact us using the address below.
6. Children
Ordo is not directed at children under 13, and we do not knowingly collect data from children under 13. If you believe a child has used Ordo, contact us and we'll help.
7. Changes to this policy
If we update this policy, we will post the revised version here, change the date at the top and, for material changes, say so in the App Store release notes.
8. Contact
Questions, feedback, or requests about privacy: heyordo.app@gmail.com.